3 ms·
You can also whitelist the cloudflare IP's and block all other traffic, that way the only traffic hitting your origin is through the proxy.
by JohnMakin 3y ago
You can also whitelist the cloudflare IP's and block all other traffic, that way the only traffic hitting your origin is through the proxy.
- ElectricalUnion 3y agoIf under heavy DDOS, it's very likely that your available upstream/downstream bandwidth is already starved, so dropping requests at your public IP level is too late.
- JohnMakin 3y agogood point
- kijin 3y agoIf you're under attack now, you should get a new public IP first. Then you can hide behind Cloudflare and drop all unproxied connections. Unless and until you get a new IP, no amount of Cloudflare wizardry can stop all the direct traffic that you're already getting. If your host's bandwidth is so completely saturated by the attack that no amount of IP switching will help, well, you should find a new host.